# Attestation REST API API

> Attestation REST API API on Apizie: 15 endpoints (Retrieves the OpenID Configuration data for the Azure Attestation Service, Attest to an Azure Guest VM., Attest to an SGX enclave., Attest to an SEV SNP Virtual Machine., …) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://zieapi.vercel.app/v1/cloud:azure-attestation-attestation/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `cloud:azure-attestation-attestation`
- Category: Cloud
- Status: byok
- Source: https://learn.microsoft.com/rest/api/azure/
- Page: https://zieapi.vercel.app/api/cloud/azure-attestation-attestation
- OpenAPI: https://zieapi.vercel.app/api/cloud/azure-attestation-attestation/openapi.json

Describes the interface for the per-tenant enclave service.

## Endpoints

### Retrieves the OpenID Configuration data for the Azure Attestation Service
`GET https://zieapi.vercel.app/v1/cloud:azure-attestation-attestation/metadata-configuration-get` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | yes | Your Attestation REST API endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |

### Attest to an Azure Guest VM.
`POST https://zieapi.vercel.app/v1/cloud:azure-attestation-attestation/attestation-attest-azure-guest` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | yes | Your Attestation REST API endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| body | object | yes | JSON request body |

### Attest to an SGX enclave.
`POST https://zieapi.vercel.app/v1/cloud:azure-attestation-attestation/attestation-attest-open-enclave` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | yes | Your Attestation REST API endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| body | object | yes | JSON request body |

### Attest to an SEV SNP Virtual Machine.
`POST https://zieapi.vercel.app/v1/cloud:azure-attestation-attestation/attestation-attest-sev-snp-vm` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | yes | Your Attestation REST API endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| body | object | yes | JSON request body |

### Attest to an SGX enclave.
`POST https://zieapi.vercel.app/v1/cloud:azure-attestation-attestation/attestation-attest-sgx-enclave` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | yes | Your Attestation REST API endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| body | object | yes | JSON request body |

### Attest to a TDX Virtual Machine.
`POST https://zieapi.vercel.app/v1/cloud:azure-attestation-attestation/attestation-attest-tdx-vm` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | yes | Your Attestation REST API endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| body | object | yes | JSON request body |

### Attest a Virtualization-based Security (VBS) enclave.
`POST https://zieapi.vercel.app/v1/cloud:azure-attestation-attestation/attestation-attest-tpm` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | yes | Your Attestation REST API endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| body | object | yes | JSON request body |

### Retrieves the set of certificates used to express policy for the current tenant.
`GET https://zieapi.vercel.app/v1/cloud:azure-attestation-attestation/policy-certificates-get` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | yes | Your Attestation REST API endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |

### Adds a new attestation policy certificate to the set of policy management certificates.
`POST https://zieapi.vercel.app/v1/cloud:azure-attestation-attestation/policy-certificates-add` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | yes | Your Attestation REST API endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| body | object | yes | JSON request body |

### Removes the specified policy management certificate. Note that the final policy management certificate…
`POST https://zieapi.vercel.app/v1/cloud:azure-attestation-attestation/policy-certificates-remove` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | yes | Your Attestation REST API endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| body | object | yes | JSON request body |

### Retrieves the attestation signing keys in use by the attestation service
`GET https://zieapi.vercel.app/v1/cloud:azure-attestation-attestation/signing-certificates-get` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | yes | Your Attestation REST API endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |

### Retrieves the current policy for an attestation type.
`GET https://zieapi.vercel.app/v1/cloud:azure-attestation-attestation/policy-get` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | yes | Your Attestation REST API endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| attestationType | string | yes | Specifies the trusted execution environment to be used to validate the evidence |

### Sets the policy for a given attestation type.
`POST https://zieapi.vercel.app/v1/cloud:azure-attestation-attestation/policy-set` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | yes | Your Attestation REST API endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| attestationType | string | yes | Specifies the trusted execution environment to be used to validate the evidence |
| body | object | yes | JSON request body |

### Resets the attestation policy for the specified tenant and reverts to the default policy.
`POST https://zieapi.vercel.app/v1/cloud:azure-attestation-attestation/policy-reset` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | yes | Your Attestation REST API endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| attestationType | string | yes | Specifies the trusted execution environment to be used to validate the evidence |
| body | object | yes | JSON request body |

### Retrieves a list of all Azure supported baseline details for the a TEE type along with an indication of…
`GET https://zieapi.vercel.app/v1/cloud:azure-attestation-attestation/tcb-baselines-get` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | yes | Your Attestation REST API endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| attestationType | string | yes | Specifies the trusted execution environment to be used to validate the evidence |

## Example
```
curl "https://zieapi.vercel.app/v1/cloud:azure-attestation-attestation/metadata-configuration-get" \
  -H "x-api-key: $APIZIE_KEY" \
  -H "x-upstream-key: $PROVIDER_KEY"
```

## FAQ

### How do I call the Attestation REST API API?
Create a free Apizie key, then send GET https://zieapi.vercel.app/v1/cloud:azure-attestation-attestation/metadata-configuration-get with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the Attestation REST API API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. Attestation REST API itself also needs your own key from azure.com.

### Can AI agents use the Attestation REST API API?
Yes. Add the Apizie MCP server (https://zieapi.vercel.app/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key cloud:azure-attestation-attestation.

### What is the status of the Attestation REST API API?
Needs your own provider key (bring your own key)